SLA Pager is a read-only Shopify fulfillment monitoring service operated under the Arbitr name. This policy explains the limited data the service processes and why.
From Shopify, SLA Pager processes only the minimum order and store metadata needed to detect overdue fulfillment: Shopify shop domain and store name, store timezone, order ID and order name/number, order processing timestamp, financial status, and fulfillment status. SLA Pager does not request or process customer names, customer email addresses, phone numbers, postal addresses, or line items.
From the merchant, SLA Pager stores the alert email address and monitoring settings the merchant provides.
We use this information solely to authenticate the merchant's store, determine whether a paid order has exceeded the configured fulfillment SLA, prevent duplicate alerts, and send operational alerts requested by the merchant. We do not use this data for advertising, customer profiling, resale, or unrelated analytics.
Cloudflare provides application hosting and database infrastructure. Resend provides transactional email delivery. Only the information necessary for those services is provided to them. Operational alert emails can contain order number/name, age, and fulfillment status.
Per-order alert state is retained for up to 90 days after the most recent alert, unless deleted earlier through Shopify's required privacy workflows. Store configuration is retained while the app is installed and is deleted when Shopify sends the required shop-redaction request after uninstall. Authentication tokens are disabled on uninstall.
Data is encrypted in transit using TLS. Stored Shopify access and refresh tokens are additionally encrypted by the application before database storage. The underlying Cloudflare database encrypts data at rest.
SLA Pager subscribes to Shopify's required privacy webhooks. The service intentionally stores no direct customer identity fields. Requests received through Shopify are handled according to the data actually stored.
Privacy and data-protection questions can be sent to privacy@arbitr.uk.